SCOM Log monitoring limitation

Stephen Morrison 91 Reputation points
2024-05-23T02:56:26.4666667+00:00

Anybody know the limitations that SCOM has around its text log monitoring.

I am monitoring a folder with a log file pattern file_*.log. This is a pretty typical situation where the logs have date stamps in the name.

But each night when the log rolls over SCOM is alerting on all matches through all the logs that match that filter not just the current log.

There are about 580 files in this folder that match file_*.log** but only about 65 that match file_**.log.

Operations Manager
Operations Manager
A family of System Center products that provide infrastructure monitoring, help ensure the predictable performance and availability of vital applications, and offer comprehensive monitoring for datacenters and cloud, both private and public.
1,440 questions
0 comments
Accepted answer
  1. Seetharaman Ramakrishnan 75 Reputation points
    2024-06-06T12:25:46.5033333+00:00

    Hello

    Not sure if you are still facing this issue. If you are then you could be running into the limitation that is listed in this Microsoft SCOM documentation

    https://video2.skills-academy.com/en-us/troubleshoot/system-center/scom/monitor-text-and-csv-log-files#more-information:~:text=Wizard%20Options.-,More%20information,-Each%20line%20of

    If you are looking for a workaround you may want to use the Log File Monitoring Framework MP from NiCE

    https://www.nice.us.com/log-file-monitoring-scom-nice-logfile-mp/

    It is a free solution and is built based on SCOM Log File monitoring features with additional features that help avoid issues that are in the above Microsoft documentation.

    Hope this helps.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. anthony strother 336 Reputation points
    2024-05-23T12:23:56.7+00:00

    Morning, so what is your question exactly? What have you setup to monitor those files?